Alta
CVE-2022-24294
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros
Crítica
CVE-2022-34983
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
Sin evaluar
CVE-2022-34982
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
Sin evaluar
CVE-2022-34981
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
Alta
Explotada en ataques
CVE-2022-33891
Apache Spark UI can allow impersonation if ACLs enabled
Crítica
CVE-2021-36711
Octobot mishandles Tentacles upload
Alta
CVE-2019-10800
Codecov does not sanitize gcov arguments
Media
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Media
CVE-2022-25303
Whoogle Search Cross-site Scripting via string parameter
Crítica
CVE-2022-31573
ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
Crítica
CVE-2022-31558
Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
Crítica
CVE-2022-31506
SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely
Crítica
CVE-2022-31507
Ganga allows absolute path traversal
Crítica
CVE-2022-35411
rpc.py vulnerable to Deserialization of Untrusted Data
Alta
CVE-2022-35410
mat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process.
Media
CVE-2021-37839
Apache Superset allows authenticated users to access metadata they have no permission to
Media
CVE-2022-31124
Possible leak of key's raw field if declared length is incorrect
Media
ghsa-c58j-88f5-h53f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares
Alta
CVE-2022-30290
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their reg
Media
CVE-2022-30289
A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2.4. An attacker can abuse the vulnerability to upload a malicious file that will
Media
CVE-2022-2309
lxml NULL Pointer Dereference allows attackers to cause a denial of service
Crítica
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Crítica
CVE-2022-31605
Unsafe yaml deserialization in NVFlare
Crítica
CVE-2022-31604
Unsafe deserialisation in the PKI implementation scheme of NVFlare
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.